smokeloader | 7dfe54b63fb42aaae85a6d81b9ed58d4f7d55661880e73ec38f24e7ecbf75de3 | Triage

Sharing

General

Target

7dfe54b63fb42aaae85a6d81b9ed58d4f7d55661880e73ec38f24e7ecbf75de3
Size

113KB
Sample

241215-rcnn5aykaj
MD5

da32ccb0b5343d4de1d7849bf8ca5b64
SHA1

9ad858751578fa3ad3283b586a11c4faee8803ce
SHA256

7dfe54b63fb42aaae85a6d81b9ed58d4f7d55661880e73ec38f24e7ecbf75de3
SHA512

02cf502c49a6e67fc9ca6a7778cbcda6ba53304eb3919a5e5f879a931fd41a729c2e3f7625b3e123f80e264f6be31a1ad5d3470564438bb0fee5b865df935571
SSDEEP

1536:sJX20N7L28Xctc2CKU0I3BWqUYW1XgU666JWEl7jFqYDZs6lbtOLiJCJk1lfIt/F:xy328M8fLVU3gUGwstIKNat/NKW

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  c140af647f2df515f2690876829843c915511fb17acd2131567559e7fde36c88.exe
- Size
  
  174KB
- MD5
  
  e9c0d9190b79f174c852eedd3b2126a9
- SHA1
  
  bba4d6194277e925781323be67b05e1d871b92f1
- SHA256
  
  c140af647f2df515f2690876829843c915511fb17acd2131567559e7fde36c88
- SHA512
  
  41af53e3b0a32afd00647f18b449c81bf2c2e6d5a88952165e9056719db27c87b94377dca805c00fbcbf763058f257311f797f8cd0807083b04b73c41879ef33
- SSDEEP
  
  3072:kf/yIkVLeYlzD3n/sRQVMES13lATeP5Ee8fza4ke8:kOLeYlXvjC1lA6PiVoe
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan